Privacy Policy

1. Introduction

This Privacy Policy explains how [Your Company Legal Name] ("Toolzipp", "we", "us") collects, uses, and shares information when you use toolzipp.com and our media processing services (the "Service"). By using the Service you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account information. When you register, we collect your name and email address via Firebase Authentication, and optionally a profile photo if you sign in with Google.

Media you process. Images and videos you upload through the dashboard editor or the Developer API are processed to perform the operation you requested (crop, resize, compress, convert, or AI enhancement) and are not retained by us afterward — the dashboard image/video editor runs entirely in your browser, and the API processes files in memory and returns the result without writing it to persistent storage.

Usage and billing data. We keep records of processing jobs, API key usage counts, and subscription/plan status so we can operate the Service, enforce plan limits, and bill you correctly. Payment card details are collected and stored by Stripe, our payment processor — we never see or store your full card number.

Technical data. Like most websites, we automatically log IP address, browser type, device information, and pages visited, including through cookies (see Section 4).

Contact form submissions. If you use our contact form, we collect the name, email, phone (optional), and message you provide, in order to respond to you.

3. How We Use Your Information

We use the information above to: provide and operate the Service; authenticate you and secure your account; process payments and manage subscriptions; enforce plan quotas; respond to support and contact requests; monitor and improve the Service; and comply with legal obligations. Where AdSense-served ads appear on public pages of the Service, aggregated and non-identifying usage data may also be used to measure ad performance (see Section 5).

4. Cookies & Similar Technologies

We use essential cookies to keep you signed in and remember your preferences (such as light/dark theme). If you are shown advertising on public, non-account pages, Google AdSense and its partners may set cookies or use similar technologies to serve and measure ads, subject to the consent choice you make in our cookie banner. You can change your cookie choice at any time; see our Cookie Policy for details, including how to opt out of personalized advertising via Google's Ad Settings.

5. Third-Party Services

We share information with the following categories of service providers, only as needed for them to perform their function:

• Google Firebase / Google Cloud — authentication, database, and application hosting.
• Google Gemini (via Genkit) — powers the optional AI-based Intelligent Enhancement feature; media you submit to that feature is sent to Google's Gemini API for processing.
• Stripe — payment processing and subscription management.
• Google AdSense — may serve advertising on public, non-account pages, subject to your cookie consent choice.

We do not sell your personal information.

6. Data Retention

We retain account and billing records for as long as your account is active and as needed to comply with legal and tax obligations. Uploaded media is not retained beyond the processing request that generated it, as described in Section 2.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update your name from Account Settings, or contact us to exercise any of these rights, including account deletion.

8. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required by your country), and we do not knowingly collect personal information from them.

9. Data Security

We use industry-standard safeguards — including encryption in transit, per-user access controls enforced by Firestore Security Rules, and hashed (not plaintext) storage of API keys — to help protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above.

11. Contact Us

Questions about this Privacy Policy can be sent via our contact page or to [[email protected]]. Our registered address is [Business Address].